$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa File: 3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa (raw, json) Hash identifier: /pe0ai83emNNIQZvWzBTnewIJaA5BUS3uBd+8EGWDz4= Subject key identifier: B2:C8:E1:91:DB:49:1E:85:CA:57:86:FC:FB:D4:99:D2:D1:C8:C7:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F4BBEA5922A00AA9AA1CD500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa Signing time: Thu 21 Nov 2024 19:15:49 +0000 ROA not before: Thu 21 Nov 2024 19:15:49 +0000 ROA not after: Wed 19 Feb 2025 19:15:49 +0000 asID: 7029 IP address blocks: 69.40.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:bb:ea:59:22:a0:0a:a9:aa:1c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 21 19:15:49 2024 GMT Not After : Feb 19 19:15:49 2025 GMT Subject: CN=690f0ae8-6af0-4e3a-a2de-bbeb6e074562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:6b:81:1f:89:7b:46:d5:0c:74:0c:9c:70: 42:5b:f6:6c:aa:a7:c6:2d:c3:09:34:66:39:4a:62: 99:14:bd:37:fd:6c:44:df:81:42:e9:b1:56:80:de: 1c:12:21:61:0f:2b:22:4a:bc:51:d7:9a:59:df:40: 09:70:1f:48:0c:ae:b8:55:08:ab:06:30:82:83:b2: cf:37:98:a3:68:58:d6:c9:f3:66:5c:d2:37:b1:12: 3f:6c:9a:8b:56:06:f6:89:af:44:c9:cf:50:c4:2b: d4:ab:b1:9a:ce:9a:b2:cd:3d:50:31:63:c6:57:ba: a9:01:96:80:b8:3b:6d:ac:df:a0:71:c5:a5:d6:bb: fe:5b:7f:f0:32:d2:17:58:56:16:67:21:41:86:d9: f6:9a:6e:7c:59:dd:ea:62:e2:af:88:36:6d:b8:bb: 14:1c:b2:0b:d8:bc:4c:6c:86:26:f1:b0:e6:a5:a9: 40:3d:67:3e:fb:54:e2:0e:70:1c:d0:46:b4:64:3a: c2:82:9b:57:2e:2d:86:65:b7:06:68:28:f6:99:fa: 68:8b:e4:0c:5b:61:31:23:aa:0c:92:18:bf:73:c4: ce:19:6b:79:35:75:98:38:bf:21:2d:77:a9:9b:6d: 1e:fa:0c:d2:c3:20:80:33:92:6c:14:57:67:c0:63: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:E1:91:DB:49:1E:85:CA:57:86:FC:FB:D4:99:D2:D1:C8:C7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:80:f6:40:71:32:91:a7:9e:3a:04:44:1a:3a:ae:62:5c:85: f1:50:13:17:d1:eb:81:05:73:28:34:f6:c8:4b:f8:ff:be:4b: 90:ba:65:36:6e:4a:6d:50:46:bd:3c:eb:ae:08:0c:d3:c4:bb: 8b:4d:b8:09:5e:6b:75:cf:bd:51:ba:e2:05:fe:1f:83:b7:74: 75:23:45:ce:8f:25:62:91:63:84:ce:cc:25:4c:a8:46:af:3b: 1a:b0:f5:8c:9b:2e:07:a6:7c:ff:e4:ba:c5:06:56:9a:7d:b2: 5b:97:d9:d0:95:0b:2e:a9:a2:f6:4d:a1:20:1c:61:59:52:87: 60:4f:70:5e:56:58:2d:44:6a:64:88:38:fa:1a:b8:c3:87:5d: ed:bd:30:39:70:16:eb:77:ee:38:5d:9b:ff:7a:89:e4:34:ff: 1c:f3:d5:13:96:f2:f8:db:e8:ac:1e:42:aa:a4:bb:5b:4e:d7: af:d6:5d:bb:59:9a:00:30:d4:c1:61:5a:c5:4e:e5:a0:08:18: 8b:c3:55:4b:2e:ef:d0:6d:dc:3f:d7:3c:be:cd:57:9a:94:cf: 70:e8:a9:63:a8:4c:30:d2:f9:33:cf:cb:83:9a:77:30:02:7e: 13:55:c1:c3:94:dc:e5:b1:8a:ea:e5:51:9b:5e:2e:7d:9b:60: ce:f6:bb:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf0u+pZIqAKqaoc1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMTE5MTU0OVoXDTI1MDIxOTE5MTU0OVowLzEtMCsGA1UEAxMk NjkwZjBhZTgtNmFmMC00ZTNhLWEyZGUtYmJlYjZlMDc0NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/hrgR+Je0bVDHQMnHBCW/ZsqqfGLcMJNGY5 SmKZFL03/WxE34FC6bFWgN4cEiFhDysiSrxR15pZ30AJcB9IDK64VQirBjCCg7LP N5ijaFjWyfNmXNI3sRI/bJqLVgb2ia9Eyc9QxCvUq7GazpqyzT1QMWPGV7qpAZaA uDttrN+gccWl1rv+W3/wMtIXWFYWZyFBhtn2mm58Wd3qYuKviDZtuLsUHLIL2LxM bIYm8bDmpalAPWc++1TiDnAc0Ea0ZDrCgptXLi2GZbcGaCj2mfpoi+QMW2ExI6oM khi/c8TOGWt5NXWYOL8hLXepm20e+gzSwyCAM5JsFFdnwGMUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLI4ZHbSR6FyleG/PvUmdLRyMf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2EyMTRjM2MtN2Y4MC0z ZTJiLThhMWItNmQ0N2VkYjIyOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmA9kBxMpGnnjoERBo6rmJchfFQExfR64EFcyg09shL+P++S5C6ZTZu Sm1QRr08664IDNPEu4tNuAlea3XPvVG64gX+H4O3dHUjRc6PJWKRY4TOzCVMqEav Oxqw9YybLgemfP/kusUGVpp9sluX2dCVCy6povZNoSAcYVlSh2BPcF5WWC1EamSI OPoauMOHXe29MDlwFut37jhdm/96ieQ0/xzz1ROW8vjb6KweQqqku1tO16/WXbtZ mgAw1MFhWsVO5aAIGIvDVUsu79Bt3D/XPL7NV5qUz3DoqWOoTDDS+TPPy4OadzAC fhNVwcOU3OWxiurlUZteLn2bYM72uw0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:56 2024 by rpki-client on console-ams.rpki-client.org